> For the complete documentation index, see [llms.txt](https://docs.darcyiq.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.darcyiq.com/build/integration-overview/aws.md).

# AWS Ecosystem

Complete integration suite for AWS partners and cloud-focused organizations, enabling deep AWS service integration and partner program management.

## Available Integrations

### Infrastructure & Operations

* [**AWS Accounts Integration**](/build/integration-overview/aws/aws-api.md) - Direct access to your AWS accounts for real-time cloud intelligence

### Partner Programs

* [**AWS ACE Integration**](/build/integration-overview/aws/aws-ace-integration.md) - Partner opportunity management and tracking
* [**AWS Bedrock LLM**](/build/integration-overview/aws/aws-bedrock-integration.md) - Use your own AI models

## Key Capabilities

### Cloud Intelligence

* Query infrastructure using natural language
* Real-time cost analysis and optimization
* Security and compliance monitoring
* Resource discovery across regions
* Trusted Advisor recommendations

### Partner Success

* Automated opportunity registration
* Funding program recommendations
* Pipeline management
* Deal registration automation

## Security Architecture

All AWS integrations use:

* **Cross-account IAM roles** with assume role permissions
* **External ID protection** against confused deputy attacks
* **Read-only access** by default
* **Temporary credentials** with automatic rotation
* **CloudTrail logging** for complete audit trail

## Prerequisites

Before configuring AWS integrations:

1. Active AWS account(s)
2. IAM permissions to create roles
3. Understanding of your AWS organization structure
4. Clear security policies for third-party access

## Best Practices

### Initial Setup

1. Start with a single AWS account
2. Use read-only permissions only
3. Test with non-production accounts first
4. Document role ARNs and External IDs
5. Review CloudTrail logs regularly

### Ongoing Management

* Rotate External IDs quarterly
* Review permissions annually
* Monitor API usage for anomalies
* Keep integration documentation updated

## Compliance

AWS integrations support:

* SOC 2 Type II compliance
* HIPAA compliance (with BAA)
* GDPR data protection
* PCI DSS standards
* FedRAMP authorization (in progress)

## Support

For AWS integration assistance:

* Review AWS IAM documentation
* Contact your AWS TAM for partner programs
* Reach out to DarcyIQ support for configuration
* Check CloudTrail for troubleshooting


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.darcyiq.com/build/integration-overview/aws.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.